JP3415456B2 - Network system, command use authority control method, and storage medium storing control program - Google Patents

Description

Detailed Description of the Invention

[0001]

BACKGROUND OF THE INVENTION 1. Field of the Invention The present invention relates to a network system constituted by connecting a plurality of computer systems via a communication line such as a distributed data management system, characterized by controlling command use authority between terminals. The present invention relates to a command use authority control method between a system and a terminal and a storage medium storing a command use authority control program.

[0002]

2. Description of the Related Art A plurality of organizations (groups) such as a distributed data management system constructed on a wide area network.
In a network system configured by connecting multiple computer systems installed in a computer with communication lines, the work of referring to and updating the information registered in the computer systems of individual organizations from the terminal devices in the computer systems of other organizations When performing, it is necessary to grant the authority to perform the reference / update for each business command.

This is to appropriately limit access and update of data in order to avoid that the uniqueness of the data stored on the network is impaired by granting access to the data at will.

In this case, in a computer system of a predetermined organization, if it is attempted to manage reference / update authority for all other organizations on an operator basis, authentication data on an operator basis is shared by the computer systems of the respective organizations. It is necessary to synchronize the authentication data when the authentication data is added or changed.

In the conventional network system, in such a case, communication for synchronizing the authentication data consumes system resources, which causes a decrease in performance of the entire system.

As an example of a conventional method for setting program execution authority (command use authority) in this type of network system, Japanese Patent Laid-Open No. 7-219899 discloses controlling execution of business jobs for each group in a plurality of computer systems. A method of doing so is disclosed. However, the technique disclosed in the publication needs to be registered for each computer ID when registering a group having an execution right of a business job in the execution right library. In addition, it is necessary to set the partner computer information, the authority type, etc., for which execution is permitted for each program / data. Therefore, the operation is complicated.

[0007]

As described above, the conventional network system and the method for controlling the command use authority thereof generally consume system resources by performing communication for synchronizing authentication data. Therefore, there is a drawback that the performance of the entire system is deteriorated.

Further, even in the method of controlling the command use authority disclosed in Japanese Patent Laid-Open No. 7-219899, the operation is complicated as described above, and the execution authority library of the group is managed for each computer. However, when a plurality of computers belong to a group, the management unit becomes small and the operation becomes more complicated.

The present invention solves the above-mentioned conventional drawbacks and omits communication for synchronizing the authentication data.
An object of the present invention is to provide a storage medium that stores a control program and a method for controlling command use authority between a network system and terminals, which can reduce unnecessary consumption of system resources and avoid performance degradation of the system.

[0010]

In order to achieve the above-mentioned object, the present invention comprises a predetermined computer system configured by connecting subsystems each having a plurality of mutually connected computer systems by a communication line. In a network system that permits execution of a business command issued by a computer system belonging to a subsystem other than the subsystem to which the computer system belongs, the subsystem is configured to execute the business command as a computer system. A business terminal for inputting, an execution server that controls execution of various processes, communicates with other subsystems, and an authentication that performs an authentication check for the business command input from the business terminal by a predetermined operator. It is equipped with a server It said subsystem said authentication server (hereinafter, "first authentication server") the own subsystem that
Group identification information for each group corresponding to
And the identification information of the business command that has the authority to execute,
First authentication data including identification information of the operator to which the user belongs
And whether the operator who has entered the business command has the login authority for the subsystem and the execution authority for the business command .
Authentication check is performed based on the authentication data , and business commands are issued.
The execution server of the subsystem that becomes the source (hereinafter,
“First execution server”) means that the first authentication server provides the login authority of the operator and the business command.
When the execution authority to execute is authenticated, the input business command is converted into the operation command included in the first authentication data.
And adding identification information of the group over data belongs sends to the subsystem which to run the business command, the subsystem the authentication server to which to run the business command (hereinafter, "second authentication server ]) Is the subsystem
Group identification information for each group corresponding to
And the identification information of the business command that has the authority to execute,
Corresponds to the subsystem that issued the business command
The second authentication data including the dependency relationship with the
The group added to the received business command
Information is extracted, and the group indicated by the extracted identification information is extracted.
Group corresponding to its own subsystem that has a dependency relationship with the group
Group based on the second authentication data, and the
An authentication check is performed on the basis of the second authentication data as to whether or not the group has the use authority of the business command, and the execution server (hereinafter referred to as the execution server) of the subsystem which is the execution destination of the business command , "Second execution server")
When the second authentication server authenticates the usage authority of the business command by the specified group , the business command is executed and the result is returned to the subsystem that issued the business command.

[0011]

[0012]

According to a second aspect of the network system of the present invention, the subsystem includes a plurality of the authentication servers.
It is characterized in that when a failure occurs in a predetermined authentication server, another authentication server executes an authentication check.

According to a third aspect of the present invention, in the network system of the present invention, the authentication server of the subsystem to which the business command is executed stores non-permitted operator information in which an operator who restricts the use of the business command is individually registered. When performing an authentication check on the use authority of the business command by the operator, the operator is also referred to the unauthorized operator information to perform an authentication check on the login authority of the operator.

Another aspect of the present invention which achieves the above object is configured by connecting subsystems having a plurality of mutually connected computer systems by a communication line, and a business command issued from a predetermined computer system. In a command use authority control method of a network system that permits execution of a computer system belonging to a subsystem other than the subsystem to which the computer system belongs, in the subsystem that is the issuer of the business command, At the authentication server that performs the authentication check for the business command input by the predetermined operator of the subsystem,
Group identification information for each group corresponding to the system
And the identification information of the business command that has the authority to execute,
First authentication data including identification information of the operator to which the user belongs
Based on the authentication information, a step of performing an authentication check as to whether the operator who entered the business command has the login authority for the own subsystem and the execution authority for the business command, and the result of the authentication check, the operator login Authority and execution for the business command
When authenticating the authority, performs execution control of various processes of the subsystem, at execution server for communicating with other subsystems, the business commands entered, before
Note that the operator included in the first authentication data belongs to
And a step of transmitting to the subsystem by adding identification information of a group which to run the business commands that, in the subsystem which to run the business command at said authentication server of the subsystem, its own sub-system
Group identification information for each group corresponding to
And the identification information of the business command that has the authority to execute,
Corresponds to the subsystem that issued the business command
The second authentication data including the dependency relationship with the group
And the group identification added to the received business command.
Separate information is extracted, and the group indicated by the extracted identification information is extracted.
The group corresponding to the local subsystem that has a dependency on the loop
Group , and performing an authentication check as to whether or not the specified group has the authority to use the business command; and, as a result of the authentication check, the use of the business command by the specified group. If you authorize
Executing the business command in the execution server of the subsystem and returning the result to the subsystem that issued the business command.

[0016]

According to a fifth aspect of the command use authority control method of the present invention, the authentication check step by the authentication server in the subsystem to which the business command is executed is performed between the identification information extracting step and the use authority determining step. The method further includes the step of performing an authentication check of the login authority of the operator by referring to information prepared in advance that individually specifies the operator who restricts the use of the business command.

[0018]

BEST MODE FOR CARRYING OUT THE INVENTION Embodiments of the present invention will be described below in detail with reference to the drawings.

FIG. 1 is a block diagram showing the configuration of a network system according to an embodiment of the present invention. Referring to FIG. 1, the network system according to the present embodiment includes a plurality of subsystems 100 connected by a communication line 200,
It consists of 300. Two subsystems 10 are shown in FIG.
Although 0 and 300 are described, it goes without saying that the number of subsystems is not limited to the number shown. Further, in the present embodiment, the following description will be given assuming that the subsystem 100 is the subsystem that issues the business command and the subsystem 300 is the subsystem that executes the business command.
The relationship between the issuing source and the executing destination of the business command is relatively determined. Therefore, in actual operation, each subsystem constituting the network system becomes both an issuing subsystem and an execution destination subsystem.

Subsystem 100 and subsystem 300
And have the same configuration. As shown, the subsystem 100 includes an authentication data terminal 11 for inputting authentication data.
0, an execution server 120 that controls execution, and an authentication server 130 that registers the authentication data input by the authentication data terminal 110 and performs an authentication check,
A business terminal 140 for inputting business commands is provided. Similarly, the subsystem 300 includes the authentication data terminal 3
10, an execution server 320, an authentication server 330, and a business terminal 340. It should be noted that FIG. 1 shows only the characteristic configuration of this embodiment, and omits the description of other general configurations.

The authentication data terminal 110 includes a communication unit 111 for transmitting / receiving data and an input unit 1 for inputting authentication data.
12 and a display unit 113 for displaying data. The communication unit 111 is realized by an interface suitable for communication with the execution server 120, the input unit 112 is realized by, for example, a keyboard and a mouse, and the display unit 113 is realized by, for example, a display device. Similarly, subsystem 3
The authentication data terminal 310 of 00 includes a communication unit 311, an input unit 312, and a display unit 313.

The execution server 120 includes a determination unit 121 that controls the execution of commands, an execution unit 122 that performs actual processing according to commands, and a communication unit 123. Judgment section 1
21 and the execution unit 122 are realized by, for example, a program-controlled CPU and a RAM or other internal memory, and the communication unit 123 includes the authentication data terminal 110 and the authentication server 13.
0, realized by an interface suitable for communication with the business terminal 140. Similarly, the execution server 320 of the subsystem 300 includes the determination unit 321, the execution unit 322, and the communication unit 3.
23 is provided.

The authentication server 130 includes a data storage unit 131 that stores authentication data and a communication unit 132. The data storage unit 131 is realized by, for example, a magnetic disk device, a magneto-optical disk device, or other external storage device, and the communication unit 132 is realized by an interface suitable for communication with the execution server 120. Similarly, subsystem 300
The authentication server 330 includes a data storage unit 331 and a communication unit 332.

The business terminal 140 includes a communication unit 141, an input unit 142 for inputting a command, and a display unit 143 for displaying a command execution result and the like. Communication unit 141
Is realized by an interface suitable for communication with the execution server 120, the input unit 142 is realized by, for example, a keyboard or a mouse, and the display unit 143 is realized by, for example, a display device. Similarly, the business terminal 340 of the subsystem 300 includes a communication unit 341, an input unit 342, and a display unit 343.

In the above structure, a plurality of subsystems 1
00 and 300 are provided corresponding to a plurality of groups (organizations) existing in geographically distant positions. In each of the subsystems 100 and 300, the authentication data terminal 11
There may be a plurality of 0, 310 and business terminals 140, 340. That is, in the present embodiment, even when there are a plurality of business terminals 140 and 340 performing a predetermined business in one group (subsystems 100 and 300), one authentication server 130 and 330 can be used by the operator. Authentication data can be managed.

The server and terminal of each subsystem described above are realized by a personal computer, workstation, or other computer system. The functions of each server and terminal are realized by the computer program controlling the data processing device of the computer system. The computer program is provided by being stored in a magnetic disk, an optical disk, a semiconductor memory, or another general storage medium. The authentication data terminal 11
The 0, 310 and the business terminals 140, 340 may be physically configured by the same computer system.

Next, the operation of this embodiment will be described with reference to the flow charts of FIGS. The operation of this embodiment includes an operation of registering authentication data and an operation of authenticating a business command in another group input by an operator of a predetermined group.

First, the operation of registering the authentication data will be described with reference to FIGS. Since the subsystem 100 is the source subsystem of the business command and the subsystem 300 is the target subcommand of the business command, the authentication data is registered according to the role of the subsystem.

In the group in which the subsystem 100 is installed, when the system administrator registers the authentication data using the input unit 112 and the display unit 113 of the authentication data terminal 110 (step 201), the authentication data terminal 110
Authentication data is sent to the authentication server 130 using the communication unit 111.
(Step 202). Here, the authentication data registered in the subsystem 100 tries to obtain the operator name, the password, the group name of the group to which the operator belongs, and the execution authority of the operator for the operator who can log in to the subsystem 100. The information includes the command name of the business command and the group name of the group to which the business command depends.

Upon receiving the authentication data transmitted from the authentication data terminal 110 by the communication unit 132, the authentication server 130 registers the authentication data in the data storage unit 131 (step 203).

In the group in which the subsystem 300 is installed, the system administrator sets the authentication data terminal 31
When the authentication data is registered using the 0 input unit 312 and the display unit 313 (step 301), the authentication data terminal 31
0 uses the communication unit 311 to transmit the authentication data to the authentication server 330 (step 302). Here, the authentication data registered in the subsystem 300 includes, as information, the command name of the business command permitted to be executed in the subsystem 300 for the group name of the group to which the business command registered in the subsystem 100 belongs. When the business command accesses predetermined data, the business command includes the group name of the group having the access right to the data.

Upon receiving the authentication data transmitted from the authentication data terminal 310 by the communication unit 332, the authentication server 330 registers the authentication data in the data storage unit 331 (step 303).

The registration of the authentication data is completed as described above. Next, the authentication operation when the operator of the group in which the subsystem 100 is installed inputs an instruction to execute a predetermined business command in the subsystem 300 from the business terminal 140 will be described with reference to FIGS. 4 and 5. .

The business command execution instruction input by the operator is transmitted from the business terminal 140 to the execution server 120 via the communication unit 141 (steps 401, 40).
2). Upon receiving the business command execution instruction, the execution server 120 makes an inquiry to the authentication server 130 to check whether the operator has the right to log in to the subsystem 100 (step 40).
3).

When the authentication server 130 determines that the operator has the right to log in to the subsystem 100, the execution server 120 determines that the communication line 20 is available.
The business command is sent to the execution server 320 of the subsystem 300 via 0 (steps 404, 40).
5). At this time, the issued operator group name, which is the group name of the group to which the operator belongs, is added to the business command. When the authentication server 130 determines that the operator does not have the authority to execute the business command, the authentication data terminal 110 performs error processing such as displaying an error message and ends the processing (step 404, 406).

Execution server 320 of subsystem 300
Asks the authentication server 330 whether the issuing operator group name of the business command sent from the subsystem 100 has the authority to use the business command and confirms (steps 501 and 502). As a result of the authentication, when the authentication server 330 permits the group to which the operator belongs to use the business command, the execution server 320 executes the business command (steps 503 and 504). Then, the execution result is returned to the subsystem 100 (step 505). When the use of the business command is not permitted, the business command is not executed and the fact is notified to the subsystem 100 as an execution result (step 505). Then, the authentication data terminal 110 performs error processing such as displaying an error message, and ends.

As described above, in this embodiment, operator authentication for an operator who uses a business command is performed by the business command issuing source subsystem. Then, if the business command is a command to be executed by another subsystem, the operator name is replaced with the operator group name and transmitted. The execution-destination subsystem can check the usage authority of the business command in the execution-destination subsystem based on the name of the operator group issuing the business command.

Therefore, when an operator is added in the execution destination subsystem, the operation of synchronizing the authentication data between the subsystems is unnecessary. Even in such a case, it is possible to determine whether or not the business command execution authority is given.

In this embodiment, when the business command is transmitted to another subsystem, the operator group name of the group to which the operator belongs is added, but the subsystem name is added to the operator name or the terminal name. Be sure to add (hereinafter referred to as subsystem name),
When sending a business command from the subsystem 100 to the subsystem 300, an operator name or a terminal name may be added instead of the operator group name.

In this case, in the subsystem 300, the subsystem name is used as a group name, and the authentication data is registered in the authentication server 330 so that the group (subsystem) having the group name has the execution authority.

In this state, when a business command is input in the subsystem 100, when transmitting from the subsystem 100 to the subsystem 300, the operator name or the terminal name of the operator who has input the business command is added. Subsystem 3 that received the business command
The execution server 320 of 00 extracts the subsystem name of the subsystem 100 from the input operator name or terminal name of the business command added to the received business command, and executes the authorization to the authentication server 330 with the extracted subsystem name. To inquire. The authentication server 330 checks the execution authority and returns the result to the execution server 320.

In the network system to which a plurality of subsystems are connected as described above, execution authority control for each business command for each subsystem can be performed.

FIG. 7 is a block diagram showing the structure of a network system according to another embodiment of the present invention.

Referring to FIG. 7, the network system of this embodiment is composed of a plurality of subsystems 100 and 300 connected by a communication line 200. Although two subsystems 100 and 300 are shown in FIG. 7, it goes without saying that the number of subsystems is not limited to the number shown.

Subsystem 100 and subsystem 300
And have the same configuration. As illustrated, the subsystem 100 includes an authentication data terminal 11 for registering authentication data.
0, an execution server 120 that controls execution, an authentication server 130 that performs an authentication check, and a business terminal 140 for inputting a business command. Similarly, the subsystem 300 includes the authentication data terminal 310, the execution server 320, the authentication server 330, and the business terminal 340.
Equipped with. It should be noted that FIG. 1 shows only the characteristic configuration of this embodiment, and omits the description of other general configurations.

In this embodiment, each subsystem 100,
At 300, a copy of the authentication server 130, 330 is provided. Authentication server 130-A, 330- that is a copy
The registration content of A is always the same as the registration content of the authentic authentication servers 130 and 330. That is, the authentication server 1
When new authentication data is registered in 30, 330, the same authentication data is immediately registered in the authentication servers 130-A, 330-A.

Judgment unit 12 of execution servers 120 and 320
1, 321 makes an inquiry about the authentication data, the authentication servers 130-A and 330- that are duplicates according to the conditions.
Authenticate by A. For example, when the authentication server 130 or the authentication server 330 is not operating normally, the normally operating copy of the authentication server 130-A or 330-
A takes over the processing.

Other configurations and operations are the same as the configurations and operations of the above-described first embodiment, and therefore description thereof will be omitted.

FIG. 8 is a block diagram showing the configuration of a network system according to still another embodiment of the present invention.

Referring to FIG. 8, the network system of this embodiment is composed of a plurality of subsystems 100 and 300 connected by a communication line 200. Although two subsystems 100 and 300 are shown in FIG. 8, it goes without saying that the number of subsystems is not limited to the number shown.

Subsystem 100 and subsystem 300
And have the same configuration. As illustrated, the subsystem 100 includes an authentication data terminal 11 for registering authentication data.
0, an execution server 120 that controls execution, an authentication server 130 that performs an authentication check, and a business terminal 140 for inputting a business command. Similarly, the subsystem 300 includes the authentication data terminal 310, the execution server 320, the authentication server 330, and the business terminal 340.
Equipped with. It should be noted that FIG. 8 illustrates only the characteristic configuration of the present embodiment and omits the description of other general configurations.

In this embodiment, as shown in FIG. 8, the data storage unit 33 of the authentication server 330 of the subsystem 300.
In FIG. 1, a non-permitted operator list 333 in which operator names of operators who are not permitted to execute a command requesting processing in the subsystem 300 is registered is stored. The operation of this embodiment will be described with reference to FIG.

In this embodiment, the subsystem 3 is previously set.
00 authentication data terminal 310 to subsystem 300
The operator name of the operator who is not permitted to execute the command is input (step 901), and the operator name is registered in the unauthorized operator list 333 stored in the data storage unit 331 of the authentication server 330 (steps 902 and 903). .

When the authentication server 330 receives an inquiry about the command execution authority from the determination unit 321 of the execution server 320 that receives the business command (steps 1001 and 1).
002), first, referring to the disallowed operator list 333, if there is an operator α as the disallowed operator name,
The authentication result that the execution of the business command is not permitted is returned to the determination unit 321 (step 1003). Regarding the subsequent operations (step 1004 to step 1006), the subsystem 3 in the first embodiment shown in FIG.
Since it is the same as the authentication operation No. 00 (step 503 to step 505), the description thereof will be omitted.

As described above, by introducing the disallowed operator list for individually designating the operators who are not permitted to execute the business command execution request, the operator α existing in the group which is erroneously made executable in the subsystem 100 can be deleted. , The subsystem 300 can be prohibited, and more detailed command use restriction control can be performed.

[0056]

EXAMPLES Next, examples of the present invention will be described with reference to specific operation examples according to the above-described embodiment.

First, registration of authentication data in the subsystem 100 will be described. In the authentication data terminal 110, the system administrator of the subsystem 100 uses the input unit 112 to input information about the operator who is permitted to log in, the type of command that can be used, the range of accessible data, and other authentication data ( After confirming the input information on the display unit 113 (FIG. 2, step 201), the communication unit 111 transmits the input information to the authentication server 130 (FIG. 2, step 202).

The authentication server 130 uses the authentication data terminal 11
After checking the authentication data sent from 0, it is registered in the data storage unit 131 for each operator and for each group (FIG. 2, step 203). Here, the registration authentication data in the authentication server 130 of the subsystem 100 has the following contents.

Registration authentication data-Operator information Operator α group α-1 @ 100 Operator β group β-1 @ 100-Command authority group α-1 @ 100 command a @ 100, command b @ 300 group β-1 @ 100 command c @ 100 In the above registration authentication data, the operator information is the group α-in which the operator α corresponds to the subsystem 100.
1 @ 100, operator β is subsystem 10
It indicates that it belongs to the group β-1 @ 100 corresponding to 0. Also, the command authority is the group α-1 @ 100.
Has the authority to execute the command a @ 100 for accessing the data stored in the subsystem 100 and the command b @ 300 for accessing the data stored in the subsystem 300, and the group β-1 @ 100 is It shows that the user has the authority to execute the command c @ 100 that accesses the data stored in the subsystem 100.

Next, registration of authentication data in the subsystem 300 will be described. In the authentication data terminal 310, the system administrator of the subsystem 300 uses the input unit 312 to input the type of command that can be used by the operator group of the subsystem 100, the range of accessible data, and other authentication data (see FIG. 3, step 301), after confirming the input information on the display unit 313,
It is transmitted to the authentication server 330 by the communication unit 311 (FIG. 3, step 302).

The authentication server 330 uses the authentication data terminal 31.
After checking the authentication data sent from 0, it is registered in the data storage unit 331 for each operator and each group (FIG. 3, step 303). Here, the registration authentication data in the authentication server 330 of the subsystem 300 has the following contents.

Registration authentication data-Command authority group α-2 @ 300 Command a @ 300, command b @ 300-Data access authority group b-2 @ 300 Data d-300 Group dependency group α-1 @ 100 Group α- 2 @ 300, group b-2 @ 300 Command authority of the above registration authentication data is group α-2
@ 300 is a command a @ 300 and a command b @ 30 for accessing the data stored in the subsystem 300.
0 has the authority to execute. Further, the group dependency relationship indicates that the group α-1 @ 100 corresponding to the subsystem 100 has the authority permitted to the group α-2 @ 300 and the group b-2 @ 300 in the subsystem 300. Indicates.

Next, referring to the flow chart of FIG.
Group α-1 @ 100 corresponding to subsystem 100
An authentication operation in the case where the operator α belonging to is accessing data stored in the subsystem 300 will be described.

In order to log in the subsystem 100, the operator α uses the input section 142 and the display section 143 of the execution terminal 140 to input login information such as an operator name and password (step 601). The terminal 140 uses the communication unit 141 to transmit the login information to the execution server 120 (step 602).

The determination unit of the execution server 120 is the communication unit 12
In step 3, when the login information is received from the business terminal 140, the authentication server 130 is inquired whether or not the login of the operator is permitted (step 60).
3).

When the authentication server 130 receives the login information from the execution server 120 via the communication unit 132, the authentication server 130 compares the login information with the authentication information registered in the data storage unit 131, and confirms that the operator α is permitted to log in. It is judged (step 604). The determination result is transmitted to the execution server 120 using the communication unit 132 (step 605).

The execution server 120 transmits the authentication result received from the authentication server 130 to the business terminal 140 (step 606), and the business terminal 140 displays the authentication result on the display device 143 (step 607). The operator α receives the result of login authentication by visually recognizing the display result of the display device 143. Here, the authentication server 13
Since the operator α is registered in the operator information of the registration authentication data of 0, the authentication result that login is permitted is obtained.

Next, it is assumed that the operator α inputs a command b @ 300 for accessing the data d-300 of the subsystem 300 from the business terminal 140 through the input section 142 (step 608). The business terminal 140 uses the communication unit 141 to transmit to the execution server 120 (step 609).

When the execution server 120 receives the command b @ 300 sent from the business terminal 140, the judgment unit 12
1 inquires of the authentication server 130 whether the operator α has the authority to execute the command b @ 300 (step 610).

The authentication server 130 includes a data storage unit 131.
It is detected that the operator α belongs to the group α-1 @ 100, and that the group α-1 @ 100 has the execution authority for the command a @ 100 and the command b @ 300 with reference to. , Operator α is command b @ 3
It is judged that there is an execution authority of 00 (step 611), and the obtained authentication result is returned to the execution server 120 (step 612).

In the execution server 120, the judgment unit 121
When the authentication result of the authentication server 130 is received via the communication unit 123, permits the execution of the command b @ 300, and transmits an execution permission request for the command b @ 300 to the subsystem 300 via the communication line 200. (Step 61
3). At this time, the group α-1 @ 100 to which the operator α belongs is added to the command execution permission request.

In the subsystem 300, the judgment unit 321 of the execution server 320 sends the command b from the communication line 200.
When the @ 300 and the information of the group α-1 @ 100 are received (step 501 in FIG. 5), the authentication server 330 determines whether or not there is the execution authority by the combination of the command and the group.
(Step 502 in FIG. 5). here,
Since the group α-1 @ 100 belongs to the group α-2 @ 300 that holds the usage right of the command b @ 300, the authentication result permitting execution is returned from the authentication server 330 to the execution server 320 ( FIG. 5, step 50
3).

Further, the group α-1 @ 100 has the authority to use the command b @ 300 and the group b-2 @.
Since it belongs to the command b, the judgment unit 321 has the right to access the data d-300.
Command b @ 30 that permits execution of @ 300, passes processing to the execution unit 322, and accesses data d-300.
0 is executed (step 504 in FIG. 5). Command b @
The result of executing 300 is, using the communication line 200,
It is transmitted to the execution server 120 of the subsystem 100 (step 505 in FIG. 5).

Referring again to FIG. 6, subsystem 10
The execution server 120 of 0 receives the execution result of the command b @ 300 sent via the network 200 (step 614) and sends the execution result to the business terminal 140 (step 615). The business terminal 140 uses the command b @
When the execution result of 300 is received, the execution result is displayed on the display unit 143 (step 616). This allows
The operator α can confirm the result of inputting the command b @ 300.

Although the present invention has been described above with reference to the preferred embodiments, the present invention is not necessarily limited to the above embodiments.

[0076]

As described above, according to the network system and the command use authority control method between terminals and the storage medium storing the control program of the present invention, the authentication management of the operator who issued the business command is performed by the business. Since the execution server of the subsystem that issues the command uses the authentication server, the authentication management of the operator does not need to be performed by the subsystem that is the execution destination of the business command. Therefore, it is not necessary to perform communication for synchronizing the authentication data, and it is possible to reduce unnecessary consumption of system resources and avoid deterioration of system performance.

Further, according to the present invention, since the authentication server is provided for each subsystem installed in each group, the operator authentication can be collectively performed even when there are a plurality of business terminals in the group. This has the effect of simplifying operation.

Furthermore, according to the present invention, in the subsystem which is the execution destination of the business command, by granting the authority of the business command for each operator group name to which the operator belongs, unless the operator group is added or changed, Even if the subsystem that issues the business command is added or changed, or the operator that issues the business command is added or changed, it is not necessary to synchronize the subsystems to share the authentication data. The effect is further simplified.

[Brief description of drawings]

FIG. 1 is a block diagram showing a configuration of a network system according to an embodiment of the present invention.

FIG. 2 is a flowchart showing an authentication data registration operation in the business command issuing source subsystem according to the embodiment.

FIG. 3 is a flowchart showing an operation of registering authentication data in the business command execution destination subsystem according to the present embodiment.

FIG. 4 is a flowchart showing an authentication operation in a business command issuing source subsystem according to this embodiment.

FIG. 5 is a flowchart showing an authentication operation in the business command execution destination subsystem of this embodiment.

FIG. 6 is a flowchart showing a more detailed authentication operation in the business command issuing source subsystem according to the embodiment.

FIG. 7 is a block diagram showing a configuration of a network system according to another embodiment of the present invention.

FIG. 8 is a block diagram showing a configuration of a network system according to still another embodiment of the present invention.

FIG. 9 is a flowchart showing an operation of a business command execution destination subsystem according to this embodiment.

[Explanation of symbols]

100,300 subsystem 110, 310 Authentication data terminal 120, 320 Execution server 130,330 Authentication server 131,331 Data storage 140,340 Business terminal

Continuation of the front page (56) References JP 10-154118 (JP, A) JP 7-219899 (JP, A) "Know everything-the directory that becomes the ledger of the network", Nikkei Communication, Japan , Nikkei BP, May 1, 1995, No. 197, p. 51-55 Igarashi, "Series Windows NT (4) Security", UNIX MAGAZINE, Japan, Askie, Inc., May 1, 1994, Volume 9, No. 5, p. 75-59 Daigo, NetWare 4.1J with 7 core services and GroupWise that realizes effective utilization, Computer & Network LAN, Nihon, Ohmsha, Ltd., September 1, 1995, Volume 13, Issue 9, p.40-50 (58) Fields investigated (Int.Cl. ⁷ , DB name) G06F 15/00 G06F 12/00 G06F 1/00

Claims (7)

(57) [Claims] 1. A subsystem other than the subsystem to which the computer system issues a business command issued from a predetermined computer system, the subsystem including a plurality of mutually connected computer systems connected by a communication line. In a network system that allows execution by a computer system belonging to another subsystem, the subsystem controls the execution of various processes and a business terminal for inputting business commands as a computer system. an execution server for communication with other subsystems, and a authentication server performing an authentication check for the operational command input from the service terminal by a predetermined operator, the operations command issuer to become the subsystem the authentication server (hereinafter referred to as "the Of the authentication server ") is a self-Subsystem
Group identification for each group corresponding to the system
Information and identification information of the business command that has the authority to execute
And first authentication including the identification information of the operator to which the user belongs
Has a data, said whether the operator entered the operational command has execute privileges for the login rights and the business command for its own subsystem first
The authentication server performs the authentication check based on the first authentication data, and the execution server (hereinafter, “first execution server”) of the subsystem that is the source of the business command is the first execution server .
Login authority and the authentication server of the operator
When the execution authority for the business command is authenticated, the input business command is included in the first authentication data.
The identification information of the group to which the operator belongs
Addition to sending the subsystem which to run the business command, the authentication server of the subsystems which to run the business command (hereinafter, "second authentication server") the own Subsystem
Group identification for each group corresponding to the system
Information and identification information of the business command that has the authority to execute
And the subsystem that issued the business command.
Second authentication data including the dependency relationship with the corresponding group
Of the group added to the received business command
Identification information is extracted and is indicated by the extracted identification information.
The group corresponding to the local subsystem that has a dependency relationship with the group
A loop is identified based on the second authentication data, and the identification is performed.
Based on the second authentication data, whether or not the group has authorization to use the business command is checked, and the execution server of the subsystem (hereinafter, “second Execution server ") is the second
The network system, wherein the authentication server executes the business command and returns the result to the subsystem that issued the business command, when the authority to use the business command by the specified group is authenticated. 2. The subsystem includes a plurality of the authentication servers, and when a failure occurs in a predetermined authentication server,
The network system according to claim 1 , wherein another authentication server executes an authentication check. 3. The authentication server of the subsystem to which the business command is executed stores non-permitted operator information in which an operator who restricts the use of the business command is individually registered, and the authorization authority of the operator to use the business command is stored. The network system according to claim 1 , wherein when performing the authentication check, the authentication check of the login authority of the operator is also performed by referring to the unauthorized operator information. 4. A subsystem other than a subsystem to which a business command issued from a predetermined computer system is constituted by connecting subsystems having a plurality of mutually connected computer systems by a communication line. In a command usage authority control method of a network system that allows execution by a computer system belonging to another subsystem of the above, in the subsystem that is the source of the business command, the command is input by a predetermined operator of the subsystem. In the authentication server that performs the authentication check for the business command ,
And group identification information and tasks that have the authority to execute.
Command identification information and operator identification information
And an authentication check whether the operator who inputs the business command has the login authority for the subsystem and the execution authority for the business command based on the first authentication data including As a result, when the login authority of the operator and the execution authority for the business command are authenticated, the execution server controls the execution of various processes of the subsystem and communicates with other subsystems. The above-mentioned business command to the first authentication data
Knowledge of the group to which the operator included in the data group belongs
Transmitting additional information to the subsystem that is the execution destination of the business command, wherein in the subsystem that is the execution destination of the business command, in the authentication server of the subsystem,
Group identification information for each group corresponding to the system
And the identification information of the business command that has the authority to execute,
Corresponds to the subsystem that issued the business command
The second authentication data including the dependency relationship with the group
And the group identification added to the received business command.
Separate information is extracted, and the group indicated by the extracted identification information is extracted.
The group corresponding to the local subsystem that has a dependency on the loop
Group , and performing an authentication check as to whether the specified group has the authority to use the business command, and as a result of the authentication check, the authority to use the business command by the specified group is authenticated. In this case, the step of executing the business command in the execution server of the subsystem and returning the result to the subsystem that issued the business command, the command use authority control method. 5. The authentication checking process by the authentication server in the execution target subsystem of the operational commands, between said identification information extraction step the use authority determination process, prepared in advance, restrict the use of business Commands 5. The command use authority control method according to claim 4 , further comprising the step of performing an authentication check of the login authority of the operator by referring to the information individually specifying the operator to be controlled. 6. A subsystem other than the subsystem to which the computer system belongs, which is configured by connecting subsystems having a plurality of mutually connected computer systems with each other through a communication line and which issues a business command issued from a predetermined computer system. A storage medium that stores a control program that controls the network system that is allowed to be executed by a computer system that belongs to another subsystem of In the subsystem, the authentication server that performs the authentication check for the business command input by the predetermined operator of the subsystem is used for each group corresponding to its own subsystem.
And group identification information and tasks that have the authority to execute.
Command identification information and operator identification information
Based on the first authentication data including and, the operator who inputs the business command executes a process of performing an authentication check as to whether or not the operator has the login authority for the own subsystem and the execution authority for the business command, As a result of the authentication check, when the login authority of the operator and the execution authority for the business command are authenticated, the execution server that controls the execution of various processes of the subsystem and communicates with other subsystems, The input business command is changed to the first authentication data.
Knowledge of the group to which the operator included in the data group belongs
By adding another information to execute the process of transmitting the subsystem which to run the business command in the subsystem which to run the business command at said authentication server of the subsystem, its own subsystem
Group identification information for each group corresponding to the system
And the identification information of the business command that has the authority to execute,
Corresponds to the subsystem that issued the business command
The second authentication data including the dependency relationship with the group
And the group identification added to the received business command.
Separate information is extracted, and the group indicated by the extracted identification information is extracted.
The group corresponding to the local subsystem that has a dependency on the loop
Group, and executes a process of performing an authentication check as to whether or not the specified group has the authority to use the business command. As a result of the authentication check, the authority to use the business command by the specified group is determined. A storage storing a control program, characterized in that, when authenticated, the execution server of the subsystem executes the business command and returns the result to the subsystem that issued the business command. Medium. 7. The use of a business command prepared in advance is restricted between the identification information extraction processing and the usage authority judgment processing in the authentication check processing by the authentication server in the business command execution destination subsystem. 7. The storage medium storing the control program according to claim 6 , further comprising a process of performing authentication check of the login authority of the operator by referring to the information individually designating the operator.